Skill UI

Enables Claude to act as a FinOps expert by analyzing cloud usage, generating cost reports, and recommending configuration changes to lower AWS, Azure, or GCP spending whenever the user asks to optimize cloud costs.

Automates Xero bookkeeping by managing invoices, contacts, payments, bank transactions, and chart-of-accounts workflows through toolkit actions, ideal for small businesses needing cloud-enabled accounting updates.

AWS Cost Operations describes a capability for overseeing cloud spending, tracking expense drivers, and aligning workloads with budgets so teams can optimize provisioning and finance decisions.

This skill provides SOC teams with a structured, multi-source workflow to investigate potential insider threats. It correlates data from SIEM, DLP, EDR, and HR feeds to detect data exfiltration attempts (via cloud, USB, email), unauthorized access patterns, and policy violations. It is crucial for building comprehensive investigation timelines, especially when handling departing employees or suspected data theft.

Implement Okta as a centralized Identity Provider (IdP) for robust multi-cloud security across AWS, Azure, and GCP. This skill covers configuring Single Sign-On (SSO), deploying phishing-resistant Multi-Factor Authentication (MFA), automating user lifecycle management via SCIM, and enforcing adaptive access policies based on device posture and user risk, helping organizations achieve Zero Trust compliance.

Automate and execute comprehensive access recertification campaigns within Saviynt Enterprise Identity Cloud. This process validates user entitlements against industry standards like SOX, SOC2, and HIPAA. It helps organizations mitigate security risks by identifying and revoking excessive or unnecessary access rights, ensuring robust identity governance and compliance.

This process validates the necessity of elevated permissions across critical accounts, including domain admins, service accounts, and cloud IAM roles. It is a core identity governance function mandated by major compliance frameworks (SOX, PCI DSS) to enforce the principle of least privilege, detect stale or excessive access, and ensure continuous security compliance.

This skill guides users through performing sophisticated web cache deception attacks. It exploits path normalization discrepancies and cache key misconfigurations between Content Delivery Networks (CDNs) and origin servers. Use this methodology to test for sensitive data exposure, cache poisoning, and authentication bypass vulnerabilities in applications protected by aggressive caching layers like Cloudflare or Akamai.

A comprehensive guide for preparing SaaS and cloud infrastructure companies for SOC 2 Type I and Type II audits. Covers mapping Trust Service Criteria (TSC), generating control matrices, performing thorough gap analysis, collecting evidence, and assessing overall compliance readiness across Security, Availability, Confidentiality, and Privacy domains. Essential for demonstrating operational trustworthiness to enterprise clients.

This skill automates the entire SOC 2 Type II audit lifecycle. It facilitates gap assessment against AICPA Trust Services Criteria (CC1-CC9) and collects continuous evidence from major cloud providers (AWS, Azure, GCP) and identity systems (Okta, Jira). It supports validating control effectiveness, remediation tracking, and overall compliance monitoring for Security, Availability, Processing Integrity, Confidentiality, and Privacy.

This skill provides comprehensive automation for managing OneDrive file lifecycles. Users can perform advanced operations including searching across metadata and content, uploading and downloading files, organizing folders, creating share links, and granularly managing permissions for specific users. It utilizes a structured workflow approach via Rube MCP, making it ideal for automating business processes involving cloud document storage and collaboration.

This guide outlines the comprehensive process of access recertification (or access review) using Saviynt Enterprise Identity Cloud. It details how to automate periodic validation of user entitlements to ensure adherence to the principle of least privilege. This function is critical for maintaining compliance with major standards such as SOX, SOC 2, and HIPAA. The process covers configuring various campaign types, managing the decision lifecycle (Approve/Revoke), and implementing remediation workflows.